The covered entity (CE), Kaiser Foundation Health Plan, Inc., reported that it disclosed the protected health information (PHI) for up to 13,134,908 individuals while using third-party tracking technologies. The PHI involved clinical, demographic, and financial information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE: removed all third-party tracking technologies from its authenticated online platforms, trained or retrained workforce members, and implemented additional administrative safeguards.
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 13400000 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), Kaiser Foundation Health Plan, Inc., reported that it disclosed the protected health information (PHI) for up to 13,134,908 individuals while using third-party tracking technologies. The PHI involved clinical, demog · backfill source
2026-09-25 · attack: unknown to ransomware · backfill source
2026-09-25 · discovered: empty to 2023-05-31 · backfill source
2026-09-25 · occurred: empty to 2023-05-31 · backfill source
